GCVE - cpe:2.3:a:canarymail:canary_mail:*:*:*:*:*:windows:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:canarymail:canary_mail:*:*:*:*:*:windows:*:*

part: a version: * update: *

Vendor	Canarymail (`2eebd803-b2ae-57e7-9fb2-ac224995edb7`)
Product	Canary Mail (`0b5651b0-6bbd-5690-b5be-065b9cfaedb9`)
Edition	*
Language	*
Software edition	*
Target software	windows
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-65318`	vulnerable	2026-06-08 07:39:20.837932	Details available When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software. Published: 2025-12-16T00:00:00.000Z Updated: 2026-07-05T16:12:47.975Z Open on db.gcve.eu Reference links https://drive.google.com/file/d/14wrTzvcLPfFsWmy-SAtDwwZKKPssBsx5/view https://github.com/nickvourd/RTI-Toolkit https://github.com/bbaboha/CVE-2025-65318-and-CVE-2025-65319	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.